https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2006-5816.htmlhttps://patchthecve.com/cve/CVE-2006-5816.htmlTue, 16 Jun 2026 22:31:56 +0000HIGH 7.5: Multiple PHP remote file inclusion vulnerabilities in Dmitry Sheiko Business Card Web Builder (BCWB) 2.5 allow remote attackers to execute arbitrary PHP code via a URL in the root_path_admin parameter to (1) /include/startup.inc.php, (2) dcontent/default.css.php, or (3) system/default.css.php, diffehttps://patchthecve.com/cve/CVE-2006-4065.htmlhttps://patchthecve.com/cve/CVE-2006-4065.htmlTue, 16 Jun 2026 22:28:21 +0000MEDIUM 5.1: Multiple PHP remote file inclusion vulnerabilities in Dmitry Sheiko SAPID Gallery 1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) root_path parameter to (a) usr/extensions/get_calendar.inc.php or the (2) GLOBALS[root_path] parameter to (b) usr/extensions/gethttps://patchthecve.com/cve/CVE-2006-4062.htmlhttps://patchthecve.com/cve/CVE-2006-4062.htmlTue, 16 Jun 2026 22:28:21 +0000MEDIUM 5.1: PHP remote file inclusion vulnerability in usr/extensions/get_tree.inc.php in Dmitry Sheiko SAPID Shop 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[root_path] parameter.